LAST UPDATED:DECEMBER 2022
WELCOME TO THE GREENLANE PRIVACY POLICY.
Greenlane Holdings, Inc. is a family of companies with operations both inside and outside of the United States and endeavors to comply with the privacy legislation within each jurisdiction in which it operates. Data privacy laws may vary in the different jurisdictions where Greenlane operates. This privacy policy (“Privacy Policy”) addresses how Greenlane Holdings Inc. and our subsidiaries and affiliates including without limitation, our directors, officers, employees and agents (collectively, the “Company,” “Greenlane,” “we,” “our” or “us”) collect, use and disclose information. You can consult the list and location of our subsidiaries and affiliates in our most recent 10Q or 10K filing here. We have adopted this Privacy Policy to govern the treatment of your Personal Information (defined below). We respect your privacy and we take the protection of your personal information very seriously. We may collect a variety of Personal Information on a voluntary or involuntary basis or for other reasonable and legitimate business purposes. This Privacy Policy describes the Personal Information that we collect from or about you, how we use it, to whom we disclose it to, how we process it and this Privacy Policy explains many of the rights you have under applicable laws and how you can exercise your rights with respect to your Personal Information. If we ask you to provide any other Personal Information not described in this Privacy Policy, then the Personal Information we will ask you to provide along with the reasons why we may ask for it will be made clear to you at the time we collect it. You have the right to withdraw or limit your consent at any time. For further information about us or this Privacy Policy, please see the contact details in the Contact Us section below.
This Privacy Policy describes our practices in connection with information that we may collect about you at our discretion from time to time including but not limited to the following:
Collectively, we refer to the Websites, Social Media Pages, emails and offline business interactions as the “Services”.
“Personal Information” is information that identifies or is identifiable, relates to, describes, or is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you or your household. Personal Information does not include information that is publicly available through government records or the internet, information that has been de-identified or aggregated, information that is anonymous or non-personal or information that cannot be reasonably linked to or traceable to you or your household. We may collect or generate anonymized and aggregated information from your use of the Sites, wi-fi, applications and systems. The following is a non-exhaustive list of the categories of Personal Information which are subject to change from time to time pursuant to applicable law which we may collect about you or your household at our discretion:
Unless we request it, we ask that you otherwise not send to us and you not voluntarily disclose to us any sensitive Personal Information (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religious or other beliefs, health, biometrics, fingerprints or genetic characteristics, criminal background history or trade union membership) on or through the Services or otherwise to us.
In order to manage our business operations, we may collect, use, share, store and disclose your Personal Information with our affiliates, subsidiaries, service providers and other third parties with whom we partner or do business with in order to assist us with our business operations. The aforementioned is subject to strict restrictions on how your Personal Information may be collected, used, shared, stored and disclosed, at your direction and with your consent or in ways otherwise in accordance with applicable laws, by those who need to have access to your Personal Information in order to perform their tasks and duties and to those who have a legitimate business purpose for having access to your Personal Information. You have the right to withdraw or limit your consent at any time. If you withdraw your consent, however, in certain situations we may not be able to fulfill our contractual and employment-related obligations to you. We also endeavor to enter into contracts or assurances with third parties to make sure they respect and comply with the confidentiality of your Personal Information and have reasonable and appropriate data security measures in place to protect against any unauthorized access. If we become aware of or have actual knowledge that one of our third party vendors or service providers entrusted with your Personal Information is using or disclosing it in a manner contrary to this Privacy Policy or in violation of applicable law, please notify us immediately and we will take reasonable steps to prevent or stop the use or disclosure and you may receive notice either from us or from our vendor or service provider of the same pursuant to applicable law. Greenlane and its service providers collect Personal Information in a variety of ways, including:
We need to collect Personal Information in order to provide the requested Services to you. If you do not provide the information requested, we may not be able to provide the Services. If you disclose any Personal Information relating to other people to us or to our third-party service providers or vendors in connection with the Services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.
Greenlane and its vendors and service providers use Personal Information for legitimate business purposes. The following is a non-exhaustive list of the ways in which we may use your Personal Information at our discretion and subject to applicable law:
We disclose Personal Information:
We also use and disclose your Personal Information as necessary or appropriate such as when we have a legal obligation or legitimate business purpose to do so:
In addition to Personal Information, Greenlane and its third-party partners, also collect certain other information when you visit our Websites, use our Services, read our emails, or otherwise engage with us. “Other Information” means any information that does not reveal your specific identity or which does not directly relate to an identifiable individual. This includes the following:
If we are required to treat Other Information as Personal Information under applicable law, then we may use and disclose it for the legitimate business purposes for which we use and disclose Personal Information as detailed in this Privacy Policy.
Collection of Other Information
The Websites and our various platforms may contain links to or integrate with third-party websites, products, apps and services that are not controlled by us. These partners provide information about your activities including information about your device, browsing history or the websites you visit or the things you do with their services. We may also receive information about your online and offline actions. Our partners receive your data when you visit or use their services or through third parties they work with. Information collected by third parties, which may include such things as contact details, is governed by such third-party’s respective privacy practices. We encourage you to learn about the privacy policies of such third parties. Greenlane and its service providers may collect Other Information in a variety of ways, including but not limited to the following:
Physical Location
We may collect the physical location of your device such as by using satellite, cell phone tower or WiFi signals. We may use your device’s physical location to provide you with personalized location-based services and content. We may also share your device’s physical location, combined with information about what advertisements you viewed and other information we collect, with our marketing partners to enable them to provide you with more personalized content and to study the effectiveness of advertising campaigns. In some instances, you may be permitted to allow or deny such uses and/or sharing of your device’s location, but if you do, Greenlane and/or its marketing partners may not be able to provide you with the applicable personalized services and content.
We promote the safety, integrity and security of our technology and systems to help us provide you with an innovative, relevant, consistent and safe experience. To that end, we use reasonable measures in our discretion to maintain physical, technical, organizational and procedural safeguards in an attempt to safeguard your Personal information from loss, alteration, misuse, unauthorized access, disclosure or use both online and offline including but not limited to the implementation of access controls, firewalls, network intrusion detection and anti-virus software and restricting access to your Personal Information to authorized personnel. In this spirit, we require that you prevent unauthorized access to your Personal Information by selecting and protecting your passwords appropriately and limiting access to your computer, laptop, cell phone and devices by signing off after you have accessed your Personal Information through the Services. No such measure is ever 100% effective, so we do not guarantee that your Personal Information will be secure from hacking, theft, loss or breach, alteration, misuse or unauthorized access, disclosure or use, and we make no representation as to the reasonableness, efficacy or appropriateness of the measures we use to safeguard such information. We are not responsible for third party circumvention of any privacy settings or security measures. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately in accordance with the Contact Us section below.
Your choices regarding our use and disclosure of your Personal Information
We give you choices regarding our use and disclosure of your Personal Information for marketing purposes. At any time, you may opt-out from:
We will comply with your request(s) as soon as reasonably practicable. Please note that if you opt- out of receiving marketing-related emails from us, we may still send you important administrative messages from which you cannot opt-out.
How you can access, change or delete your Personal Information
Depending on your state of residency, you may request to review, correct, update, suppress, restrict, limit the use of or delete your Personal Information, opt-out or object to the processing of your Personal Information or request to receive an electronic copy of your Personal Information (to the extent these rights are provided to you by applicable law). If you are a California resident, please refer to the “Additional Information for California Residents” section below for more information about the requests you may make under the California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020 (hereinafter collectively referred to as the “California Consumer Privacy Laws.” You may send your request through the “Contact Us” section below.
Please note that we may need to retain certain information for recordkeeping purposes, pursuant to applicable law and/or to complete any transactions that you began prior our receipt of your request (e.g., if you make a purchase or enter a promotion, you may not be able to change or delete the Personal Information provided until after the completion of such purchase or promotion).
We retain Personal Information for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include:
This Privacy Policy does not address and we are not responsible for, the privacy, information or other practices of any third parties, including any third party operating any website or service to which the Services link. The inclusion of a link on the Services does not imply endorsement of the linked site or service by us or by our affiliates.
In addition, we are not responsible for the information collected, used, disclosed or for the security policies or practices of other organizations, such as Facebook, Apple, Google, Microsoft or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider or device manufacturer, including with respect to any Personal Information you disclose to other organizations through or in connection with our Social Media Pages.
Some of the products that we sell through our Services are highly regulated and contain restrictions on the purchaser’s age. We are required and committed to preventing the sales of our products to anyone under the legal age pursuant to applicable law. We will only send you marketing materials and information that encourage or facilitate a purchase of our products after you have certified that 1) you are of legal age to purchase our products, 2) you understand that providing false information may constitute a violation of applicable law and 3) if you opt-in to such marketing materials and information.
Before you submit an order to purchase our products, we will verify your age through a non-affiliated third-party service provider to perform an age and identify verification check in compliance with applicable law. We use these trusted and reputable third party service providers to verify the information that you provide to us for purposes of age verification and to ensure that you qualify to access and purchase our products. We take your privacy very seriously and this process has been developed to protect the privacy of your Personal Information.
In some cases, in compliance with applicable law, we may require that you provide a government-issued identification (“ID”) or other forms of valid ID. If, through the third-party verification service, we are not able to verify your age and/or identity, you will be requested to upload a copy of your ID so that our team can manually verify your age. ID’s are uploaded to our third-party partner’s secure database and we simply process the result that they provide – in other words, we do not receive a file with your ID to be stored or saved on our servers or databases.
The Services are not directed to individuals under the legal age pursuant to applicable law and we do not knowingly collect Personal Information from individuals under the legal age pursuant to applicable law.
We may use a third party payment service provider to process payments made through the Services. If you wish to make a payment through the Services, your Personal Information will be collected by such third party and not by us and you will be subject to the third party’s privacy policy in addition to this Privacy Policy. We have no control over and we are not responsible for the third party service provider’s collection, use and disclosure of your Personal Information. Please contact us if you would like more information about the third party service provider(s) we use to process your payments.
Your Personal Information may be stored and processed in any country where we have facilities or in which we engage with third party service providers and by using the Services you understand that your information may be transferred to countries outside of your country of residence, including the United States, which may have data protection rules that are different from those of your country or state. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your Personal Information. If you are accessing the Services from other jurisdictions, please be advised that you are transferring your Personal Information to us in the United States where data protection and privacy laws may be less stringent than the laws of your country. BY USING THE SERVICES, YOU CONSENT TO THE TRANSFER AND USE OF YOUR PERSONAL INFORMATION IN ACCORDANCE WITH THIS PRIVACY POLICY.
You may also file a complaint with a data protection authority for your country or region or where an alleged infringement of applicable data protection law occurs. A list of data protection authorities is available here.
Pursuant to the California Consumer Privacy Laws, you may request to review, correct, update, suppress, restrict, limit the use of or delete your Personal Information, opt-out or object to the processing of your Personal Information or request to receive an electronic copy of your Personal Information (to the extent these rights are provided to you by applicable law). To make a request for the disclosures or for any other purpose related to this Privacy Policy, please refer to the Contact Us section below.
We may collect, share and/or disclose the following categories of Personal Information of our customers, prospective customers and visitors to our websites, social media pages and stores:
Category |
A. Identifiers such as legal first and last name, alias, postal address, online identifier, IP address, email address, account name (including social media) and driver’s license or other government - issued ID number (solely for the purpose of verifying age – see “Age Verification” section above for more information). |
B. Personal information as defined in the California Consumer Privacy Laws including but not limited to name, contact information, account information, profile picture and social media account ID and driver’s license or other government-issued ID (solely to verify age – see Age Verification above). |
C. Characteristics of protected classifications or demographic information under applicable California or federal law, such as age. |
D. Commercial information such as transaction information, purchase history, financial details and payment information. |
E. Biometric information, such as fingerprints and voiceprints. |
F. Internet or other electronic network activity information, such as browsing history, search history, online behavior, interest data and interactions with our Websites, applications, systems, emails and advertisements. Information related to the use of your technology devices such as cell phones and laptops used for business purposes across our network, communication or systems, search history, chat history, browsing history, login information, virtual meetings and IP addresses. |
G. Geolocation data, such as device location and IP location. |
H. Audio, electronic, visual and similar information, such as call recordings and CCTV footage created for quality assurance, safety and security purposes. |
I. Professional or employment-related information included in job applications. |
J. Inferences drawn from any of the Personal Information listed above to create a profile or summary about an individual’s personal preferences and characteristics. |
We may collect a variety of Personal Information about you on a voluntary or involuntary basis to manage your current or potential employment relationship with us, to manage workforce activities and personnel generally, including for recruitment, employee training, leaves, promotions and discipline; manage payroll, wages, tax forms and filing, stock grants and bonuses; administer benefits; maintain and secure our facilities and systems; protect the health and safety of our workforce and others; conduct research, analytics and data analysis to assist in planning succession and to ensure business continuity or for other reasonable and legitimate business purposes. We may collect the following categories of Personal Information of current or former employees, job applicants, independent contractors, owners, directors and officers as well as their emergency contacts, dependents and beneficiaries.
If you submit any Personal Information relating to other people to us such as beneficiary information or information related to any dependents, spouses or domestic partners associated with you, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy. The following is a non-exhaustive list of the categories of Personal Information we may collect at our discretion and subject to applicable law:
Category |
A. Identifiers including but not limited to contact information, online identifiers and Social Security numbers, passport information, military issued identification and other government-issued ID. |
B. Personal information as defined in the California Consumer Privacy Laws including but not limited to name, contact information, education information, employment history, financial information and medical and medical insurance information. |
C. Characteristics of protected classifications under applicable California or federal law including but not limited to sex, age, race, religion, national origin, disability, medical conditions and information, citizenship, immigration status, request for leave and marital status. |
D. Commercial information, such as transaction information and payment information, in each case for employee-only deals and discounts on our goods and products. |
E. Biometric information, such as fingerprints and voiceprints. |
F. Internet or other electronic network activity information, such as browsing history and interactions with our Websites, applications, systems and emails. |
G. Geolocation data, such as device location and IP location. |
H. Audio, electronic, visual and similar information, such as call recordings and CCTV footage created for quality assurance, safety and security purposes. |
I. Professional or employment-related information, such as work history, prior employer, information relating to references, details of qualifications, skills and experience, human resources data and data necessary for benefits and related administration services. |
K. Inferences drawn from any of the personal information listed above to create a profile or summary. |
L. Educational and professional background, such as work history, academic records, professional qualifications, professional licenses, certifications and references. Resumes, cover letters, interview notes, job applications, offer letters, credit history or background checks and any other information which is voluntarily disclosed by you directly or indirectly in the course of your application for and employment with us. |
M. Employment details such as the names of your previous employers, job titles or positions, hire and end dates or durations of employment, performance reviews, disciplinary records |
N. Demographic data such as your gender, sexual orientation, date of birth, race, ethnicity, national origin, marital status, disability status, veteran status or military status |
O. Financial information such as tax and withholding information, payroll information, salary, bonus, wage, stock or equity grants, retirement or 401k, expense reports, banks or financial institution names and account numbers, credit card number, or debit card number |
P. Information relating to company health or welfare benefits such as medical, dental, pet care, life insurance, short-term or long-term disability benefits, medical leave of absence or paid time off records |
Selling or Sharing Personal Information
We do not sell your Personal Information.
Non-Discrimination
We will not discriminate against you for exercising any of your rights under the California Consumer Privacy Laws. In other words, we will not deny goods or services to you, charge you a higher price or provide a lower level of customer service or a lower quality of goods just because you exercised your rights under the California Consumer Privacy Laws. However, if you refuse to provide your Personal Information to us or ask us to delete or to stop sharing your Personal Information and that Personal Information or the sharing of it is necessary for us to provide you with the goods or services, we may not be able to complete that transaction, promotion, discount etc. If you are not sure how your request may affect your participation in a special offer, please ask us and we are happy to answer any question you may have. Our contact information is located at the bottom of this Privacy Policy.
Disclosures: Access to Specific Information and Personal Information Portability Rights
Disclosures: Access to Specific Information and Personal Information Portability Rights
If you are a California resident, you have the right, subject to certain exceptions defined in the California Consumer Privacy Laws and other applicable law and regulations, to request that we disclose certain information to you about our data collection practices and the use of your Personal Information as follows:
You have the right to request that we disclose to you the following information, free of charge:
Deletion Rights - You have the right, subject to certain exceptions defined in the California Consumer Privacy Laws and other applicable law, to request that we delete any or all of your Personal Information that we have collected from or about you and retained.
Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting a change or deletion (e.g., when you make a purchase or enter a promotion, you may not be able to change or delete the Personal Information provided until after the completion of such purchase or promotion).
Correction Rights – You have the right to require the correction of inaccurate information about you.
Right to Limit the Use of Personal Information – You have the right to request that we use your Personal Information for only certain, limited purposes such as to provide the Services to you (e.g. buy products or services, enter sweepstakes etc.).
Right to Opt-In/Out – You have the right to opt-in/out of the sharing of your Personal Information to any third party
We reserve the right, at our discretion, to change or modify this Privacy Policy at any time to reflect changes in applicable law or in how we manage your Personal Information. We encourage you to periodically review this Privacy Policy for the latest information about our Privacy Policy, practices and procedures. Any changes to this Privacy Policy will be effective as of the date posted at the top of this Privacy Policy. Your use of the Services following these changes means that you accept the then-current and revised Privacy Policy.
Greenlane Holdings Inc. is responsible for the collection, use, sharing and disclosure of your Personal Information under this Privacy Policy. If you have any questions or concerns about this Privacy Policy, please contact us at privacy@gnln.com, call us directly at 877.292.7660 or send written correspondence to our mailing address at:
Greenlane
1095 Broken Sound Parkway NW, Suite 100
Boca Raton, Florida 33487
When you contact us, please specify in reasonable detail your intended request. If we are able to verify your request, we will process it. If we cannot verify your request, we may ask you for additional information to help us verify and to comply with your request. We will try to comply with your request as soon as reasonably practicable which shall be consistent with applicable law.
For your protection, we may need to verify your identity before implementing your request including but not limited to requesting your first and last name, email address, telephone number or address so that we can verify the request. Please provide as much of the requested information as possible to help us verify the request. We will only use the information received in a request for the limited purpose of responding to your request. The verification steps we take may differ depending on the request you make and will be on a case-by-case basis. We will match the information that you provide in your request to information we already have on file to verify your identity. If we cannot comply with your request, we will inform you of the reasons why subject to applicable law. We will use reasonable efforts to answer your questions and advise you of any steps taken to address the issues raised by you. If you are unsatisfied with our response, you may be entitled to make a written submission to the data privacy authority applicable in your jurisdiction.
To protect your privacy, please do not include credit card numbers, social security numbers or any other sensitive, Personal Information in your email(s) or communication(s) to us. If you are not sure whether your information is sensitive or not, please err on the side of excluding it from your email(s) or communication(s) to us.